def grant_timestream_read()

in cdk/stacks/grafana/grafana_stack.py [0:0]

• 27 lines of code
• 1 McCabe index (conditional complexity)

    def grant_timestream_read(self, execution_role, database, table):
        execution_role.add_to_policy(iam.PolicyStatement(
            effect=iam.Effect.ALLOW,
            actions=[
                "timestream:DescribeEndpoints",
                "timestream:ListDatabases",
                "timestream:SelectValues"
            ],
            resources=["*"]
        ))
        execution_role.add_to_policy(iam.PolicyStatement(
            effect=iam.Effect.ALLOW,
            actions=[
                "timestream:ListTables",
                "timestream:DescribeDatabase"
            ],
            resources=[database.attr_arn]
        ))
        execution_role.add_to_policy(iam.PolicyStatement(
            effect=iam.Effect.ALLOW,
            actions=[
                "timestream:Select",
                "timestream:ListMeasures",
                "timestream:DescribeTable"
            ],
            resources=[table.attr_arn]
        ))